Web Application Vulnerability in Configuration Management Tool by Vendor

CVE-2025-54768

What is CVE-2025-54768?

The vulnerability arises from a misconfigured API endpoint, intended solely for use by web application administrators, which is inadvertently accessible to lower-level read-only users. This exposure allows unauthorized access to logs containing sensitive configuration data, posing significant risks to data security and privacy. Organizations using this Configuration Management Tool should assess their exposure and implement proper access controls to safeguard sensitive information.

References